Created attachment 322944 [details] Output of "ausearch -sv no -ts 15:55" Description of problem: With SELinux targeted policy enforced, evince doesn't list printers when invoked by firefox when displaying a linked PDF document. Version-Release number of selected component (if applicable): selinux-policy-targeted-3.5.13-11.fc10.noarch firefox-3.0.2-1.fc10.x86_64 nspluginwrapper-1.1.2-4.fc10.i386 nspluginwrapper-1.1.2-4.fc10.x86_64 evince-2.24.1-3.fc10.x86_64 poppler-0.8.7-1.fc10.x86_64 How reproducible: Reproducible. Steps to Reproduce: 1. setenforce 1 2. Use firefox to display a PDF document (local or remote, doesn't matter) 3. In the evince window, click on File -> Print Actual results: Only "Print to File" is listed. Expected results: Additionally, all accessible printers are listed. Additional info: When setting SELinux in permissive mode, the printers are listed and printing works. On a colleagues system, remote CUPS printers where listed nonetheless, so this may be a problem that concerns locally configured printers only. I'll attach audit logs in both enforcing and permissive mode (both up to the point where the print dialog with the list of printers is displayed).
Created attachment 322945 [details] Output of "ausearch -sv no -ts 15:58" (which was run after "setenforce 0")
NB: When invoking evince from outside the browser, all printers are listed and printing works.
Fixed in selinux-policy-3.5.13-18.fc10